515bet Privacy Policy — Data Protection and LGPD

1Who We Are — The Data Controller

A 515bet, a Sports Betting and online casino platform accessible at 515bet.biz, is the controller of its users' personal data, as defined by the LGPD (Law No. 13.709/2018). We are responsible for determining the purposes and means of processing the information collected.

A 515bet is a platform built exclusively for the Brazilian market, focused on Sports Betting (football, e-sports, MMA/UFC, basketball, volleyball) and casino games (slots, crash games like Aviator and Spaceman, live roulette, blackjack, baccarat) for players aged 18 and over residing in Brazil.

For questions, requests, or to exercise your rights regarding your personal data, reach us at contato@515bet.biz or via the 24-hour live chat available on the platform.

2What Data We Collect

A 515bet collects only the data necessary to operate the platform, process financial transactions, and meet applicable legal obligations. Below are the categories of data we process:

Registration and identity data:

• Full name, date of birth, and CPF;
• Email address and mobile number;
• Full residential address (street, ZIP code, city, state);
• Identity documents (national ID, driver's license, or passport) — collected during the KYC verification process;
• Selfie with ID document — required for ownership verification during the KYC process.

Financial data:

• Pix key (CPF, email, phone number, or random key) for withdrawal processing;
• History of deposits and withdrawals made on the platform;
• Partial credit or debit card details (only the last four digits are stored — the full card number is never retained by 515bet and is processed directly by the payment gateway).

Platform usage data:

• Full history of Sports Betting activity and casino sessions;
• Game preferences and most frequently accessed categories;
• IP address, device type, operating system, and browser;
• Access logs with the date, time, and duration of each session;
• Customer support interactions (live chat, emails sent).

3How and Why We Use Your Data

A 515bet uses your personal data solely for the purposes described below. Your data is never used for anything you haven't been informed about:

4Legal Bases for Processing

The LGPD requires that all personal data processing have a legal basis. 515bet bases its data processing on the following legal grounds:

• Contract performance: Processing is necessary for 515bet to deliver the services you agreed to when creating your account — betting, payments, support, and casino access;
• Legal obligation: Identity verification (KYC), anti-money laundering measures, and reporting to authorities are obligations imposed by betting sector regulations and Brazilian financial legislation;
• Legitimate interest: Fraud prevention, platform security, user experience improvement, and VIP Program operations — always proportionate and respectful of data subjects' rights;
• Consent: Sending marketing communications, promotions, and news by email or SMS. This consent may be withdrawn at any time without affecting your access to the platform.

5Data Sharing

A 515bet does not sell, rent, or share users' personal data with third parties for commercial purposes. Data is shared only in the situations listed below, all of which are strictly necessary:

Operational partners (data processors):

• Game providers: Pragmatic Play, PG Soft, Evolution Gaming, Spribe, and other providers receive only the anonymous game session identifier — never your personally identifiable data;
• Payment gateways: Pix, boleto bancário, credit and debit card, PicPay, and Mercado Pago processors receive the minimum data necessary to execute the transaction, under confidentiality agreements and in compliance with the Banco Central do Brasil;
• Infrastructure providers: Cloud servers and security monitoring systems that host the platform, contracted under strict data protection clauses;
• Technical support: Live chat tools that process support interactions, with access restricted to only the data needed to handle each request.

Legal obligations:

A 515bet may share data with competent public authorities — such as the Banco Central do Brasil, Receita Federal, COAF, or public security agencies — when required by court order, administrative proceeding, or legal obligation applicable to the betting and anti-money laundering sector. In such cases, the user will be notified whenever permitted by law.

6Cookies and Tracking Technologies

A 515bet uses cookies and similar technologies to ensure the platform functions correctly, improve the user experience, and analyze usage behavior in aggregate.

Types of cookies used:

• Essential cookies: Required for the platform's basic operation — authentication, session management, and security. These cannot be disabled without affecting your use of the service;
• Performance cookies: Collect anonymized information about how users navigate the platform (pages visited, load times). Used to improve the overall experience;
• Preference cookies: Store your language, theme, and gaming preferences so you don't have to reconfigure them every time you log in;
• Analytical cookies: Analytics tools that measure platform performance and identify areas for improvement — data is aggregated and does not identify individual users.

A 515bet does not use third-party tracking cookies for behavioral advertising purposes. You can manage your cookie preferences through your browser's settings panel. Disabling essential cookies may affect how the platform functions.

7Data Security

A 515bet implements technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. The main measures in place include:

• 256-bit SSL/TLS encryption: All communications between your device and our servers are encrypted — including login data, financial transactions, and personal information;
• Secure storage: Personal and financial data are stored on servers with restricted access, continuous monitoring, and encrypted backups;
• Two-factor authentication (2FA): Available to all users — we strongly recommend enabling it for added account protection;
• Internal access controls: Only staff with a direct operational need have access to users' personal data, and every access is logged;
• Anti-fraud monitoring: An automated suspicious activity detection system running 24 hours a day, capable of proactively blocking anomalous access;
• Regular audits: Security processes are reviewed on a regular basis by internal teams and, where applicable, by external auditors.

In the event of a security incident that may cause significant risk or harm to data subjects, the 515bet will notify the Autoridade Nacional de Proteção de Dados (ANPD) and affected users within the timeframe set out by the LGPD.

8How Long We Retain Your Data

A 515bet retains your data for the minimum time necessary to fulfill the purpose of collection and applicable legal obligations:

• Active account data: Retained for the full lifetime of the account — for as long as you remain an active user of the platform;
• Financial and transaction data: Retained for a minimum of 5 years after account closure, as required by tax legislation and anti-money laundering regulations;
• Identity verification documents (KYC): Retained for a minimum of 5 years after account closure or last use of the service, in accordance with regulatory requirements;
• Access and usage logs: Retained for 6 months for security and dispute resolution purposes, and may be extended if an investigation is ongoing;
• Support communications: Retained for 2 years for quality assurance and dispute resolution purposes;
• Marketing data (with consent): Deleted within 30 days of consent withdrawal, unless another legal basis for retention applies.

Once retention periods expire, data is securely and irreversibly deleted or anonymized for statistical purposes in a way that makes it impossible to identify the data subject.

9Protection of Minors' Data

The services provided by 515bet are intended exclusively for users aged 18 and over. The platform does not knowingly collect personal data from minors.

The entire registration process includes date-of-birth verification, and the identity check (KYC) confirms that the user is of legal age through an official ID document. If 515bet determines that a person under 18 has created an account — whether through a false age declaration or by any other means — the account will be immediately closed, collected data will be deleted, and any remaining balance will be returned to the legal holder of the CPF used.

If you are the legal guardian of a minor and believe they have created an account on 515bet, please contact us immediately at contato@515bet.biz.

10International Data Transfer

Some of the game providers and infrastructure services that 515bet uses may be located outside Brazil. When this occurs, data transfers are carried out only to countries that provide an adequate level of protection, or with specific safeguards in place, in accordance with Articles 33 and 34 of the LGPD.

The key safeguards applied to these transfers include:

• Standard contractual clauses for data protection required of international service providers;
• Data processing agreements (DPA) with all vendors that access Brazilian users' data;
• Only the minimum data necessary is transferred for the provision of the specific service;
• Contractual prohibition on using transferred data for any purpose other than delivering the service contracted by 515bet.

Important: Pix withdrawal data is processed exclusively within Brazil, through the Central Bank's instant payment system, with no international data transfers involved.

11How to Exercise Your Rights

The LGPD grants you, as a data subject, the rights described at the beginning of this policy. To exercise any of them, you can:

• Live chat: Access the platform and use the 24-hour support chat — let us know you wish to exercise a right under the LGPD and specify which one;
• Email: Send your request to contato@515bet.biz with the subject line "LGPD Request — [type of right]";
• Response time: 515bet will respond within 72 hours to confirm receipt and within 15 business days to complete the request, in accordance with the LGPD.

For data deletion or portability requests, we may need to verify your identity by confirming some account details. This is a security measure to ensure that only the account holder can exercise rights over their own data.

12Communications and Marketing

A 515bet may send communications about your account, transactions, and operational matters without requiring consent — these notices are necessary for service delivery (deposit and withdrawal confirmations, security alerts, account verification notifications).

Marketing communications — promotions, news, bonuses, tournaments, and gaming content — are sent only with your express consent, collected at registration or later through your account settings.

How to manage your communication preferences:

• Go to your account settings and select "Communication Preferences";
• Uncheck the channels you no longer wish to receive (email, SMS, push notifications);
• Use the unsubscribe link included in every marketing email sent by 515bet;
• Contact support via 24h live chat or at contato@515bet.biz.

Opting out of marketing communications does not affect your access to the platform or the services of 515bet. Essential operational communications will continue to be sent regardless of your marketing preferences.

13Changes to This Policy

A 515bet reserves the right to update this Privacy Policy at any time to reflect changes in data processing practices, regulatory requirements, or platform improvements.

When significant changes occur, you will be notified at least 15 days in advance by email and through a prominent notice on the platform. Minor changes, such as text corrections and clarifications that do not affect the substance of the processing, may be made without prior notice.

The date of the most recent update is always shown at the top of this document and in the index section. We recommend reading this policy periodically. Continued use of the platform after an updated version takes effect constitutes acceptance of the changes.

14Contact — Privacy Channel & DPO

For any questions related to privacy, data protection, or the exercise of rights under the LGPD, please contact 515bet:

• Privacy email: contato@515bet.biz (subject: "Privacy / LGPD")
• Live chat: Available 24 hours on the platform — request privacy-related assistance
• Response time: Up to 72 hours to confirm receipt; up to 15 business days for resolution

If you are not satisfied with the response you receive, you have the right to file a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the regulatory body responsible for the LGPD in Brazil.

This Privacy Policy is available in Brazilian Portuguese and is the official document governing the data processing of users of the 515bet. Also see our Terms and Conditions and the Responsible Gambling for additional information on the use of the platform.